On Thu, Mar 20, 2003 at 12:32:50PM -0700, [EMAIL PROTECTED] wrote:
> Okay, I think I'm starting to understand what you want. (because I
> believe we tossed the idea around at the last hackathon)
>
> Basically, you want a state-creating packet to be able to create state
> on multiple interfaces, like:
>
> pass in on $ext_if proto tcp from any to $webserver port 80 \
> keep state on {$ext_if $int_if} flags S/SAFR
>
> (The way I had envisioned it, this would only occur for the
> state-creating packet, and it would only do so for the interfaces
> indicated.)
>
> Is this what you mean?
Yes, thank you. I also still mean that pf(4) should not care about
packets going 'out' of an interface, only in, but let's kill this
thread.
Or even better, dis the "keep state on {$ext_if $int_if}"; "keep
state" should be enough, since pf(4) should take care of that. Now
this feature would be _very_ nice.
Any chance this could be implemented, say post 3.3?
Henning? Others?
